Senior Cyber Defense Analyst - Remote Incident Response Leader

Google; New York (NY); Teletrabalho; USD 138 000 - 200 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health, dental, vision, life, and disa

401(k) with company match

Paid Time Off: 20 days/year

Sick Time: 40 hours/year

Maternity Leave: 28-30 weeks

Baby Bonding Leave: 18 weeks

Holidays: 13 paid days

Resumo da oferta

Google Cloud Mandiant invites a Cyber Defense Analyst to join a fast-moving team focused on incident response and defending client SOCs. You will work with cross-functional teams to translate requirements into actionable defense improvements and guide containment, remediation, and long-term SOC enhancement efforts.

The role emphasizes real-time analysis with SIEM/EDR tools, threat intelligence, and MITRE-aligned methodologies, ensuring robust protection across diverse industries in a dynamic

Qualificações

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience in cybersecurity roles (e.g., SOC analyst, malware research, threat hunting) working with EDR and SIEM technologies.
• Experience with SPL, KQL, YARA-L or similar SIEM query languages, with experience in SIEM log flow, aggregation, and forwarding.
• Experience leading incident response activities.

Responsabilidades

• Identify issues in CDCs and plan improvements to completion.
• Conduct real-time analysis using SIEM, Endpoint, and Network technologies to identify security events and false positives.
• Advise on CDC, CSIRT, and SOC Management activities.
• Research cybersecurity intelligence sources and attacker techniques to improve SOC detection and response.
• Collaborate with client stakeholders to drive resolution for security issues.

Conhecimentos

EDR

SIEM

Threat hunting

Incident response leadership

Formação académica

Bachelor's degree in Computer Science or related field

Ferramentas

SPL

KQL

YARA-L

Descrição da oferta de emprego

Google Cloud Mandiant invites a Cyber Defense Analyst to join a fast-moving team focused on incident response and defending client SOCs. You will work with cross-functional teams to translate requirements into actionable defense improvements and guide containment, remediation, and long-term SOC enhancement efforts.

The role emphasizes real-time analysis with SIEM/EDR tools, threat intelligence, and MITRE-aligned methodologies, ensuring robust protection across diverse industries in a dynamic